config

type Config struct {
	// BaseURL overrides the ORCID host — useful for tests
	// (httptest.NewServer) or the sandbox environment
	// (https://pub.sandbox.orcid.org/v3.0). Defaults to
	// https://pub.orcid.org/v3.0.
	BaseURL string

	// Transport lets the caller wrap the HTTP round-trip — the usual
	// use case is instrumentation (tracing spans, metrics, structured
	// logs). Custom TLS or proxy config also plug in here. When nil,
	// http.DefaultTransport is used.
	//
	// Client-level safety features (redirect policy, timeout) are
	// preserved regardless.
	Transport http.RoundTripper

	// UserAgent overrides the default UA string. The default carries
	// the library name, version, and repo URL.
	UserAgent string

	// Logger receives warnings. Defaults to slog.Default().
	Logger *slog.Logger

	// Timeout is applied to the constructed HTTP client. Zero uses the
	// default (10s).
	Timeout time.Duration

	// MaxResponseSize caps the number of bytes the driver will read
	// from any single response before failing with an error. Guards
	// against unbounded reads from a hostile or misbehaving server.
	// Zero means the default (16 MiB — ORCID records are small); a
	// negative value disables the cap entirely.
	MaxResponseSize int64

	// AllowInsecure permits a non-HTTPS BaseURL. By default, [New]
	// refuses to construct a Client if BaseURL uses http:// (except
	// for localhost / loopback addresses, which are allowed for tests).
	AllowInsecure bool
}

type Option func(*Config)